feat: add Tailscale Funnel config for Claude AI connector testing

Browse Source

Add docker compose services (tailscale-mcp + nginx-claude-filter) behind
a claude-funnel profile that expose the login-flow MCP server via
Tailscale Funnel with IP-based access control:

- /mcp endpoint restricted to Claude AI outbound IPs (160.79.104.0/21)
- /oauth/*, /.well-known/*, /app paths open to all IPs (user login flow)
- All other paths return 404

Also add favicon.png served at /favicon.ico for connector directory
discovery (Google favicon service).

Usage:
  docker compose --profile login-flow --profile claude-funnel up -d

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Chris Coutinho

2026-03-29 21:00:00 +02:00

co-authored by Claude Opus 4.6

parent 3cf4c777ed

commit b8dc1d7f52

7 changed files with 177 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

third_party/astrolabe

Vendored

+1 -1

Submodule third_party/astrolabe updated: d245ded7f8...829db07a8c